The book was prepared by experts of the Echelon testing laboratory as a generalization of research experience in the field of security of information and software resources. Contains metrics, models and formal methods for testing information security tools and software security testing, as well as current regulatory and legal requirements for certification of information security tools.